Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Filters








165 Hits in 2.8 sec

Automated verification of pattern-based interaction invariants in Ajax applications

Yuta Maezawa, Hironori Washizaki, Yoshinori Tanabe, Shinichi Honiden
2013 2013 28th IEEE/ACM International Conference on Automated Software Engineering (ASE)  
We also present a selective set of interaction invariants derived from Ajax design patterns, as input.  ...  The results of our case studies show that JSVerifier can verify the interaction invariants in a feasible amount of time, and we conclude that it can help developers increase the usability of Ajax applications  ...  . • An automated verification of interaction invariants in Ajax applications. • A selective set of interaction invariants based on Ajax design patterns and property patterns. • Implementation of the verification  ... 
doi:10.1109/ase.2013.6693076 dblp:conf/kbse/MaezawaWTH13 fatcat:pn2gri2cwje6dgsenfngdrf6uy

Web Applications Development by Formal Refinement Approach

Meftah Mohammed Charaf Eddine, Kazar Okba
2015 International Journal of Software Engineering and Its Applications  
Finally, in the case study, we have developed a complete application (Travel Agency) in order to show the benefits of our approach.  ...  This approach involves the generation of a web application on both sides (users' side (Ajax) and the web service side (Composition)) from formal specifications.  ...  The development of Web 2 application will be in encoding expression of tasks by B refinements using patterns of refinement operators.  ... 
doi:10.14257/ijseia.2015.9.12.07 fatcat:c4uvrinwujgizm6jtddqujuf6y

Invariant-Based Automatic Testing of Modern Web Applications

A. Mesbah, A. van Deursen, D. Roest
2012 IEEE Transactions on Software Engineering  
The testing method we propose is based on CRAWLJAX 9 a crawler capable of automatically deriving a state machine from an AJAX web application, which we originally proposed in early 2008 [24] .  ...  AJAX-based Web 2.0 applications rely on stateful asynchronous client/server communication, and client-side run-time manipulation of the DOM tree.  ...  ACKNOWLEDGMENTS The authors are grateful to Cor-Paul Bezemer, Stefan Lenselink, and Frank Groeneveld for their contributions in improving the CRAWLJAX core implementation.  ... 
doi:10.1109/tse.2011.28 fatcat:2qadzni4cjez7jvabb2nqtqbty

Regression Testing Ajax Applications: Coping with Dynamism

Danny Roest, Ali Mesbah, Arie van Deursen
2010 2010 Third International Conference on Software Testing, Verification and Validation  
AJAX applications pose an even greater challenge since the test case fragility degree is higher due to extensive run-time manipulation of the DOM tree and asynchronous client/server interactions.  ...  There is a growing trend to move desktop applications towards the web using advances made in web technologies such as AJAX.  ...  While the use of AJAX technology positively affects the user-friendliness and the interactiveness of web applications [11] , it comes at a price: AJAX applications are notoriously error-prone due to,  ... 
doi:10.1109/icst.2010.59 dblp:conf/icst/RoestMD10 fatcat:3u6vj56yt5efffb72zry7rtgfa

JSART: JavaScript Assertion-Based Regression Testing [chapter]

Shabnam Mirshokraie, Ali Mesbah
2012 Lecture Notes in Computer Science  
We propose an automated technique for JAVASCRIPT regression testing, which is based on on-the-fly JAVASCRIPT source code instrumentation and dynamic analysis to infer invariant assertions.  ...  These obtained assertions are injected back into the JAVASCRIPT code to uncover regression faults in subsequent revisions of the web application under test.  ...  In this paper, we present an automated technique for JAVASCRIPT regression testing based on generated invariant assertions.  ... 
doi:10.1007/978-3-642-31753-8_18 fatcat:zd4acj5gjfhbbgk52a5nnv7jka

Automated security testing of web widget interactions

Cor-Paul Bezemer, Ali Mesbah, Arie van Deursen
2009 Proceedings of the 7th joint meeting of the European software engineering conference and the ACM SIGSOFT symposium on The foundations of software engineering on European software engineering conference and foundations of software engineering symposium - ESEC/FSE '09  
Our approach, implemented in a number of open source Atusa plugins, called Diva, requires no modification of application code, and has few false positives.  ...  interaction violations.  ...  The applicability of our approach is not limited to Ajax-based widgets, and can be used to test the security of any web application in which inter-element interactions pose security threats.  ... 
doi:10.1145/1595696.1595711 dblp:conf/sigsoft/BezemerMD09 fatcat:te76hkfytjhfxl7cutr5mrrbre

Verification of the IBOS Browser Security Properties in Reachability Logic [article]

Stephen Skeirik and José Meseguer and Camilo Rocha
2020 arXiv   pre-print
This paper also highlights the reasoning techniques used in the proof and three modularity principles that have been crucial to scale up and complete the verification effort.  ...  This paper presents a rewriting logic specification of the Illinois Browser Operating System (IBOS) and defines several security properties, including the same-origin policy (SOP) in reachability logic  ...  Web browsers have in fact become operating systems for a myriad of web-based applications.  ... 
arXiv:2005.12232v1 fatcat:cix33wr27fh6fhib34j2ainmte

Effective test generation and adequacy assessment for JavaScript-based web applications

Shabnam Mirshokraie
2014 Proceedings of the 2014 International Symposium on Software Testing and Analysis - ISSTA 2014  
We proposed (1) a new automated technique for JavaScript regression testing, which is based on inferring invariant assertions, (2) the first JavaScript mutation testing tool, capable of guiding the mutation  ...  The work presented in this dissertation has focused on advancing the stateof-the-art in testing JavaScript-based web applications by proposing a new set of techniques and tools.  ...  In subsequent work [76] , they propose generic and application-specific invariants as a form of automated soft oracles for testing AJAX applications.  ... 
doi:10.1145/2610384.2631832 dblp:conf/issta/Mirshokraie14 fatcat:r5vzqzi66repdj5shshfsy3gmi

A systematic mapping study of web application testing

Vahid Garousi, Ali Mesbah, Aysu Betin-Can, Shabnam Mirshokraie
2013 Information and Software Technology  
To make these applications more dependable, for the past decade researches have proposed various techniques for testing web-based software applications.  ...  Results: Our study includes a set of 79 papers (from the 147 retrieved papers) published in the area of web application testing between 2000-2011.  ...  asserted invariants on web applications. [102] derived DOM invariants dynamically by recording a sequence of user interactions with the application and observing the changes to the DOM tree by repeatedly  ... 
doi:10.1016/j.infsof.2013.02.006 fatcat:cgvvkgdauvfklpklcq36reyyhu

Automatic generation of program specifications

Jeremy W. Nimmer, Michael D. Ernst
2002 Software engineering notes  
In practice, how accurate are the results of a dynamic analysis?  ...  Measured against this verification task, the generated specifications scored over 90% on precision, a measure of soundness, and on recall, a measure of completeness.  ...  This research was supported in part by NSF grant CCR-0133580 and CCR-9970985 and by a gift from NTT Corporation.  ... 
doi:10.1145/566172.566213 dblp:conf/issta/NimmerE02 fatcat:tatd6ue77vdqtjrhpkhinhjwma

Automatic generation of program specifications

Jeremy W. Nimmer, Michael D. Ernst
2002 Software engineering notes  
In practice, how accurate are the results of a dynamic analysis?  ...  Measured against this verification task, the generated specifications scored over 90% on precision, a measure of soundness, and on recall, a measure of completeness.  ...  This research was supported in part by NSF grant CCR-0133580 and CCR-9970985 and by a gift from NTT Corporation.  ... 
doi:10.1145/566210.566213 fatcat:2ohlclualffefa7podd4flld6a

Automatic generation of program specifications

Jeremy W. Nimmer, Michael D. Ernst
2002 Software engineering notes  
In practice, how accurate are the results of a dynamic analysis?  ...  Measured against this verification task, the generated specifications scored over 90% on precision, a measure of soundness, and on recall, a measure of completeness.  ...  This research was supported in part by NSF grant CCR-0133580 and CCR-9970985 and by a gift from NTT Corporation.  ... 
doi:10.1145/566171.566213 fatcat:wscmdr2j2varbagk3gagldp42q

WebSpec: Towards Machine-Checked Analysis of Browser Security Mechanisms [article]

Lorenzo Veronese, Benjamin Farinier, Pedro Bernardo, Mauro Tempesta, Marco Squarcina, Matteo Maffei
2022 arXiv   pre-print
WebSpec, in particular, includes a comprehensive semantic model of the browser in the Coq proof assistant, a formalization in this model of ten Web security invariants, and a toolchain turning the Coq  ...  We showcase the effectiveness of WebSpec by discovering two new logical flaws caused by the interaction of different browser mechanisms and by identifying three previously discovered logical flaws in the  ...  including developers and editors of Web standards.  ... 
arXiv:2201.01649v2 fatcat:sbbe5ye6rjatzo7ustafawmciy

Web application testing: A systematic literature review

Serdar Doğan, Aysu Betin-Can, Vahid Garousi
2014 Journal of Systems and Software  
To make these applications more dependable, for the past decade researchers have proposed various techniques for testing web-based software applications.  ...  Results: Our pool of studies includes a set of 95 papers (from the 193 retrieved papers) published in the area of web application testing between 2000 and 2013.  ...  Vahid Garousi was additionally supported by the University of Calgary and the Natural Sciences and Engineering Research Council of Canada (NSERC).  ... 
doi:10.1016/j.jss.2014.01.010 fatcat:6pc2zs4cwng7nh4gfnd5zjjj4a

JSEFT: Automated Javascript Unit Test Generation

Shabnam Mirshokraie, Ali Mesbah, Karthik Pattabiraman
2015 2015 IEEE 8th International Conference on Software Testing, Verification and Validation (ICST)  
The event-driven and highly dynamic nature of JavaScript, as well as its runtime interaction with the Document Object Model (DOM) make it challenging to test JavaScript-based applications.  ...  We also find that JSEFT outperforms an existing JavaScript test automation framework both in terms of coverage and detected faults.  ...  ACKNOWLEDGMENT This work was supported in part by a Strategic Project Grant (SPG) from the Natural Science and Engineering Research Council of Canada (NSERC), and a research gift from Intel Corporation  ... 
doi:10.1109/icst.2015.7102595 dblp:conf/icst/Mirshokraie0P15 fatcat:mqm3e6x4pfgotguuwd4tkrfura
« Previous Showing results 1 — 15 out of 165 results